1 . (Original) A packet-based communication network for communication 

through a communication network gateway comprising: 

a firewall on the communication network gateway for securing 
communications to and from the network; 

a communication device on the communication network connected 
to the firewall by a communication link; 

a trusted entity linked to the firewall by a communication link, said 
link allowing information packets to be sent to a first communication 
pinhole through the firewall to the communication device; and 

said trusted entity replacing an address designation in the address 
header of one of said information packets with an address designation for 
the first communication pinhole so the information packet can be 
transmitted through said pinhole to said communication device. 

2. (Original) The packet-based communication network for communication 

through a communication network gateway of Claim 1 wherein the first 
communication pinhole is established using signaling messages 
transmitted through the firewall. 

3. (Original) The packet-based communication network for communication 

through a communication network gateway of Claim 2 wherein the 
signaling messages include a create pinhole message. 



4. (Original) The packet-based communication network for communication 

through a communication network gateway of Claim 2 wherein the 
signaling messages include a create pinhole acknowledge message. 

5. (Original) The packet-based communication network for communication 

through a communication network gateway of Claim 1 wherein the trusted 
entity is a media proxy router. 

6. (Original) The packet-based communication network for communication 

through a communication network gateway of Claim 1 wherein the trusted 
entity includes a component with a soft-ware functional switch. 

7. (Original) The packet-based communication network for communication 

through a communication network gateway of Claim 1 wherein the 
communication network includes an application server on the 
communication link between the firewall and the communication device. 



5 



8. (Original) A method for routing information packets across a firewall to a 

packet-based communication network comprising the steps of: 

receiving a create pinhole request at a trusted entity linked to the 
firewall of the communication network and located outside the 
communication network; 

creating a pinhole communication port in the firewall in response 
to the create pinhole request; 

receiving a first information packet at the trusted entity to be 
transmitted across the firewall through said pinhole; 

replacing an address in the information packet address header 
information with a communication port address for the pinhole created in 
the firewall; and 

forwarding the information packet to a destination address across 
the firewall using the communication port address for the pinhole 
communication port. 

9. (Original) The method for routing information packets across a firewall to a 

packet-based communication network of Claim 8 further comprising the 
steps of: 

creating a communication port address routing table association on 
the trusted entity for designated pinhole ports in the firewall using address 
data from the create pinhole request. 
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10. (Original) The method for routing information packets across a firewall to a 

packet-based communication network of Claim 8 further comprising the 
steps of: 

transmitting said create pinhole request from an end-terminal to the 
trusted entity; and 

receiving a create media pinhole acknowledgement at the end- 
terminal containing the communication port address. 

1 1 . (Original) The method for routing information packets across a firewall to a 

packet-based communication network of Claim 8 further comprising the 
steps of: 

transmitting said create pinhole request from an application server 
to the trusted entity; and 

receiving a create media pinhole acknowledgement at the 
application server. 

12. (Original) The method for routing information packets across a firewall to a 

packet-based communication network of Claim 1 1 wherein the application 
server is a session initiation protocol proxy server. 

13. (Original) The method for routing information packets across a firewall to a 

packet-based communication network of Claim 1 1 wherein the application 
server is an integrated access device. 
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14. (Original) The method for routing information packets across a firewall to a 
packet-based communication network of Claim 1 1 wherein the application 
server is an application proxy server. 
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15. (Original) A method for using a pinhole communication port in a packet- 
based communication network firewall comprising the steps of: 

providing a trusted entity having an input and an output outside the 
communication network; 

linking said trusted entity to the pinhole communication port; 

transmitting a first signal from the communication network to the 
input of the trusted entity, wherein said signal has an address designation 
for said pinhole communication port; 

providing a routing table on the trusted entity with the address 
designation for the pinhole communication port; 

receiving a packet transmission at the input of the trusted entity to 
be sent to a communication device inside the communication network; 

placing the address designation for the pinhole communication port 
as the address header of the packet transmission; and 

transmitting the packet transmission from the output of the trusted 
entity to the pinhole communication port for transmission onto the 
communication device. 
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16. (Original) The method for using a pinhole communication port in a packet- 
based communication network firewall of Claim 15 further comprising the 
step of: 

transmitting a second signal from the output of the trusted entity 
containing the address designation of the communication port, wherein 
said second signal acknowledges receipt of the first signal. 



17. (Original) The method for using a pinhole communication port in a packet- 
based communication network firewall of Claim 16 further comprising the 
step of: 

receiving the second signal at the communication device. 



1 8. (Original) The method for using a pinhole communication port in a packet- 
based communication network firewall of Claim 16 further comprising the 
step of: 

receiving the second signal at a server on the communication 
network. 



19. (Original) The method for using a pinhole communication port in a packet- 
based communication network firewall of Claim 1 5 wherein the 
transmission packet contains voice data. 
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20. (Original) The method for using a pinhole communication port in a packet- 
based communication network firewall of Claim 15 wherein the 
transmission packet is a real time transport protocol information packet. 
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21 . (New) A method for enabling communication through a firewall between 

a first device outside of a communication network and a communication 
device inside of the communications network comprising: 

receiving at a trusted entity outside of the communications network 
an information packet transmitted by the first device to the communication 
device, the information packet including a first destination address 
designation; 

correlating the first destination address designation to a second 
destination address designation using a data element stored on the trusted 
entity; 

transmitting by the trusted entity the received information packet 
with the second destination address designation, the second address being 
the address of a pinhole in a firewall that secures communications to and 
from the communications network and enables communication from the 
trusted entity to the communication device through the firewall. 

22. The method of claim 21 wherein the first address is an address of the 
trusted entity. 

23. The method of claim 21 wherein the data element is a routing data element 
that includes an association between the communications network and the 
second address. 

24. The method of claim 21 wherein the pinhole is created by a message sent 
from the communication device to the trusted entity. 
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The method of claim 21 wherein the pinhole is created by a message sent 

by a second entity inside of the communications network. 

The method of claim 25 wherein the second entity is a Proxy Server. 
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